DoD Cybersecurity Engineer — RMF, STIGs & eMASS Expert

S2i2, Inc; Washington (District of Columbia); On-site; USD 110,000 - 120,000; Full time

Job summary

S2i2, Inc is seeking a Cybersecurity Engineer to join our DoD-focused team at the Pentagon area in Arlington/Crystal City, VA. The role is on-site, full-time, requiring a Secret or Top-Secret clearance.

You will perform RMF assessments, implement DISA STIGs, and manage eMASS artifacts while coordinating with program leadership. You will analyze vulnerability data, develop remediation plans, and prepare data-driven reports for senior leaders.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or related discipline.
• 5+ years of cybersecurity engineering, security assessment, vulnerability management, or RMF experience in a DoD or federal enterprise environment.
• Hands-on experience using eMASS to support RMF packages, security controls, assessment evidence, POA&Ms, and authorization activities.
• Experience conducting technical assessments using DISA STIGs, ACAS, Axonius, Evaluate-STIG, Trellix, and/or comparable enterprise cybersecurity tools.
• Experience supporting CCORI/CCRI/CORA-type inspections, cyber readiness assessments, Cyber Hardening Mission efforts, or similar enterprise compliance and operational-risk initiatives.
• Strong knowledge of vulnerability management, secure configuration validation, asset management, remediation verification, risk analysis, and cybersecurity reporting.
• Advanced Microsoft Office proficiency, including Excel and creation of executive-ready PowerPoint briefings.
• Communicate complex technical issues, risk impacts, and remediation recommendations clearly to engineers, system owners, program managers, and senior leaders.

Responsibilities

• Perform technical cybersecurity assessments of servers, endpoints, applications, network devices, and other enterprise information systems using DISA STIGs, ACAS, Axonius, Evaluate-STIG, Trellix, and other approved Enterprise Security Services (ESS) tools.
• Analyze scan results, configuration findings, asset inventory data, and security-control evidence to identify vulnerabilities, misconfigurations, compliance gaps, and remediation priorities.
• Develop, maintain, and update RMF and authorization artifacts in eMASS, including control implementation statements, assessment evidence, POA&Ms, risk records, and remediation status.
• Support Cyber Command Readiness Inspection/Operational Readiness Inspection activities, including CCORI-related preparation, evidence collection, technical validation, corrective-action tracking, and post-assessment remediation.
• Support Cyber Hardening Mission activities by validating secure configurations, coordinating technical remediation, documenting exceptions, and tracking risk acceptance or mitigation actions.
• Correlate ACAS vulnerability data, STIG assessment results, Axonius asset-discovery data, Trellix security telemetry, and other ESS outputs to provide a complete view of enterprise cyber risk.
• Create data-driven reports, dashboards, trackers, and remediation metrics using advanced Microsoft Office tools, especially Excel formulas, pivot tables, lookups, data analysis functions, charts, and PowerPoint briefing materials.
• Brief technical teams, system owners, ISSMs/ISSOs, program managers, and senior leadership on assessment results, cyber risk, trends, remediation progress, and decisions needed.
• Coordinate with infrastructure, network, cloud, application, endpoint, and security operations teams to validate findings and resolve vulnerabilities within required timelines.
• Maintain assessment artifacts and documentation in accordance with contract, organizational, DoD, and RMF requirements.

Skills

RMF experience

Vulnerability management

STIGs compliance

Security reporting

Clear communication

Office proficiency

eMASS usage

Problem solving

Education

Bachelor's degree in cybersecurity or related field

Tools

eMASS

DISA STIGs

ACAS

Axonius

Evaluate-STIG

Trellix

Job description

S2i2, Inc is seeking a Cybersecurity Engineer to join our DoD-focused team at the Pentagon area in Arlington/Crystal City, VA. The role is on-site, full-time, requiring a Secret or Top-Secret clearance.

You will perform RMF assessments, implement DISA STIGs, and manage eMASS artifacts while coordinating with program leadership. You will analyze vulnerability data, develop remediation plans, and prepare data-driven reports for senior leaders.